Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: vICn1LUaN37Uz+VsbzvIsPhIg9/aevjKgRqLFD1hMXM=
Subject key identifier: E3:32:B7:29:08:25:EA:54:54:90:86:E8:94:5F:C5:2A:4E:AD:A9:17
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 01992CA2274E66CD219AC8D15D94ACA0BF6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 04:00:48 +0000
Manifest this update: Tue 09 Sep 2025 04:00:48 +0000
Manifest next update: Wed 10 Sep 2025 04:00:48 +0000
Files and hashes: 1: HFN5MH980DuANiJdbkL6ohnJj_k.roa (hash: Em5iJ0QcHb70vMs6Q6eEnq42l8uUpkT28Ocl0kx6uPc=)
2: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: DZxVJStjXHcmurwIkCvgIK790P/sQdqcoT6x45zMEMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:a2:27:4e:66:cd:21:9a:c8:d1:5d:94:ac:a0:bf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Sep 9 04:00:48 2025 GMT
Not After : Sep 10 04:00:48 2025 GMT
Subject: CN=e332b7290825ea54549086e8945fc52a4eada917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:d5:b3:5c:69:cd:b7:d2:ca:c2:92:0e:a6:
b3:5c:4d:19:9b:52:88:29:84:7e:24:ff:cb:db:3f:
13:0b:d1:72:e5:c5:c7:d6:ef:c9:86:dd:73:f8:6b:
74:60:f6:ce:95:dd:67:78:49:ab:0f:3a:4c:ed:f9:
65:59:96:34:d3:cb:e7:8e:3e:58:28:3e:3a:a6:b0:
b7:b4:e4:68:64:08:b1:93:b7:36:cb:11:97:d9:82:
bc:d7:12:dd:8b:e1:a6:86:f8:d3:b0:b6:aa:74:03:
de:d3:25:13:a6:5e:3c:da:d3:0e:3b:6f:16:c8:62:
a5:30:0d:b8:37:ec:6e:94:eb:8d:57:95:5a:b8:a1:
ce:08:48:4e:51:5c:62:4e:cc:47:48:1f:10:bc:1a:
e1:5b:8f:9f:58:25:44:e4:08:e6:2d:a2:ab:47:de:
77:be:9c:da:9a:0d:cd:57:8f:02:c6:b0:a8:e1:f0:
b1:d6:33:0c:8b:5c:bc:cc:14:75:b6:bf:b9:40:c3:
9f:4e:17:59:c5:c3:63:24:2e:8e:9e:4a:d5:f2:c9:
5e:46:9a:af:96:ba:8c:37:52:13:3a:0e:5b:f8:92:
8f:17:56:81:eb:68:c5:40:c3:f1:2a:cb:57:4f:f3:
bd:21:d4:5a:12:be:e4:28:99:f4:94:ca:61:63:24:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:B7:29:08:25:EA:54:54:90:86:E8:94:5F:C5:2A:4E:AD:A9:17
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ec:ad:9d:10:b7:a2:79:fe:23:db:d9:d1:72:4e:54:52:08:
13:8e:af:35:03:ff:45:aa:f7:74:4e:4c:46:4e:b4:7f:ac:3e:
98:cc:18:9d:7e:64:d4:1a:95:90:cb:d4:9c:64:88:1f:72:52:
d6:c4:f7:51:69:86:8f:6a:01:ea:8a:05:33:7a:22:f1:d5:41:
5c:7b:aa:e0:6c:45:13:b5:3a:f4:b0:21:75:ab:ae:9e:8f:fe:
29:52:55:51:f4:02:a9:7c:75:20:a3:88:12:a6:ab:aa:c1:fd:
95:ec:2d:f7:20:5a:43:9e:7a:ed:b2:74:1e:40:91:6c:87:ec:
06:2e:20:f1:45:22:78:c1:7c:1a:0d:17:13:fb:d5:31:ed:8d:
76:6a:ee:37:ef:34:c7:7d:04:c5:da:b6:17:05:63:cd:82:c5:
29:07:0f:97:10:e6:7e:9e:b1:a6:96:a7:91:e1:37:36:1b:23:
56:78:de:c7:c2:b9:92:12:1a:ad:2c:7c:5f:7f:37:c3:ce:f9:
2a:73:8f:37:7d:15:ef:6a:38:43:58:8c:90:84:3b:5d:db:19:
4d:7e:14:5e:f1:ac:15:54:7f:f0:4a:58:76:9b:2b:01:1c:4f:
a2:b5:0d:cb:a9:ae:c4:52:d6:ea:bc:2a:58:fd:4a:2a:52:68:
68:9c:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:20:08 2025 by rpki-client